Compliance and Information Security Manager

Job Summary

A company is looking for a Compliance & Information Security Manager to build and manage its corporate compliance and information security governance program.

Key Responsibilities

• Manage compliance programs related to PCI DSS, SOC 1 / SOC 2, and related frameworks
• Serve as project manager for external audits and certifications, coordinating internal teams and external auditors
• Develop and maintain compliance, privacy, and information security policies and documentation

Required Qualifications

• 5+ years of experience in compliance, information security, risk management, or GRC roles
• Hands-on experience managing PCI and SOC audits
• Working knowledge of U.S. consumer privacy and data protection laws
• Bachelor's degree in a related field or equivalent experience
• Experience reviewing and redlining commercial agreements